Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/3jIOtpYFYIvMfH8dsy6hvc3Ojfc.roa
File: 3jIOtpYFYIvMfH8dsy6hvc3Ojfc.roa (raw, json)
Hash identifier: s+IKhUBxhcUsgyfhXOjlKVbBHprNFZnDTaAumuWBaZU=
Subject key identifier: DE:32:0E:B6:96:05:60:8B:CC:7C:7F:1D:B3:2E:A1:BD:CD:CE:8D:F7
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 0195929C94E42C9175A4512111F5AF781CF0
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/3jIOtpYFYIvMfH8dsy6hvc3Ojfc.roa
Signing time: Fri 14 Mar 2025 03:04:50 +0000
ROA not before: Fri 14 Mar 2025 03:04:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60672
IP address blocks: 185.137.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:92:9c:94:e4:2c:91:75:a4:51:21:11:f5:af:78:1c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Mar 14 03:04:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de320eb69605608bcc7c7f1db32ea1bdcdce8df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:23:eb:cb:36:39:b1:99:c2:a8:87:c6:a5:
b9:94:02:2d:95:67:18:08:d0:10:49:13:76:f1:fb:
55:37:b2:96:78:7f:56:2b:ed:e4:b1:27:88:c3:30:
ab:b8:d0:a0:66:d0:7b:70:c5:6f:5e:c0:c2:5b:d6:
3a:1c:25:9c:de:30:35:a3:d4:94:bf:59:82:e0:28:
4b:27:a6:a4:3e:1a:b6:51:6f:0a:fa:ec:26:4a:8c:
47:2c:98:b5:31:0a:41:28:6b:fd:d3:7a:b0:c8:89:
8a:3e:a0:a9:48:7a:c0:88:31:84:ce:e1:be:a0:bc:
4d:d2:15:86:bd:8d:92:5d:61:84:1f:34:1c:82:0f:
5b:c7:f3:29:8e:29:73:d6:2b:49:a0:a6:f0:f1:d1:
64:92:7e:f2:e9:40:d4:4b:96:ba:58:b5:3f:f6:67:
98:ae:b5:03:4b:b5:ae:4f:56:96:08:20:c6:fe:2b:
30:15:c1:92:20:e2:82:45:31:40:35:ca:c9:91:a1:
80:aa:83:68:89:12:98:ff:4f:cb:0b:2c:ad:50:f6:
03:31:b6:c8:17:a1:7a:d8:bb:52:1a:ff:e8:e7:13:
b8:27:d8:65:19:50:6c:f8:33:ce:6a:31:1d:93:bf:
76:fc:c6:1a:c5:2b:5d:5f:95:61:f8:7d:f0:ba:8b:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:32:0E:B6:96:05:60:8B:CC:7C:7F:1D:B3:2E:A1:BD:CD:CE:8D:F7
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/3jIOtpYFYIvMfH8dsy6hvc3Ojfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:65:1e:6f:99:f2:52:b9:42:e8:0e:cf:3a:f3:84:b2:a4:c1:
71:d8:1c:a9:13:66:b4:ce:26:2c:fb:79:11:96:fb:c6:7d:a9:
dc:9f:78:b3:55:61:65:d5:91:37:f9:21:ef:74:03:4d:44:d5:
e5:e6:e9:88:77:b5:cf:c3:fa:bc:03:ea:71:89:cd:5b:2c:26:
df:c3:70:a3:2a:ca:3e:f9:8c:4c:3f:dd:67:d9:31:7d:3f:ec:
a3:f2:4e:7b:a2:78:2a:33:27:64:aa:d2:77:af:eb:6e:66:4e:
df:b3:7a:69:10:9f:72:9b:30:a3:79:9f:4f:a3:ce:16:3f:98:
55:2e:1c:7c:56:0e:3c:f4:30:9c:86:28:73:d0:7f:ff:80:42:
2f:2d:53:f0:6a:f7:75:9b:f6:08:0e:88:df:bd:7a:f9:09:6c:
7b:45:c0:0e:60:df:92:c3:9d:ed:96:60:34:21:43:c8:8d:b1:
e2:b3:ed:b8:4d:d6:9c:4b:03:c5:e5:34:26:fb:af:86:dc:ec:
2a:cf:9b:da:6a:15:8e:cc:c7:4f:43:67:38:bf:b0:f7:30:78:
04:20:23:b8:4f:94:fb:89:24:e6:61:0a:8b:1b:16:fd:a4:e2:
ae:e8:e1:9e:b8:3b:4b:00:35:ea:36:46:c6:7b:31:3f:41:51:
ed:8c:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:09 2025 by rpki-client